
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/8e995849-0009-3de2-9b32-fedf49d93743.roa
File: 8e995849-0009-3de2-9b32-fedf49d93743.roa (raw, json)
Hash identifier: ZObDziwM9mccItjDZN9gnb11c3DrHN711gQRmAzg7Uo=
Subject key identifier: 6E:7C:A5:4B:08:AC:1C:B1:E4:9D:55:5C:F4:DE:51:BD:E3:A5:6B:B5
Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial: 010D0C9F4328584ED431E5B7F220DCD70D6260C0
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/8e995849-0009-3de2-9b32-fedf49d93743.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 27010
IP address blocks: 2602:f9f6:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:e5:b7:f2:20:dc:d7:0d:62:60:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=3c0b9c5c-62dc-49b6-9eb6-8f1b74bc9675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:b6:25:6e:7f:11:f7:e1:75:f9:90:14:00:
ef:41:41:5b:4c:38:10:54:0d:b9:85:68:9f:31:09:
05:15:26:42:de:31:51:e4:2a:e8:0f:0c:c7:01:f2:
6e:ed:8a:11:67:bf:78:0e:fa:4f:2f:6e:f3:3a:b5:
8b:4a:97:7e:6c:45:bd:5b:2b:85:39:93:87:32:01:
6d:40:fc:36:eb:8f:f9:2f:28:c9:e4:9c:43:59:dd:
03:85:e8:f3:04:58:66:61:4d:bc:24:e5:4f:e6:fe:
49:e7:72:05:6a:ab:8e:01:22:9e:c2:0d:cb:97:c2:
02:7e:0a:65:0e:a1:bd:65:b4:b9:54:d1:33:e9:1e:
84:8e:ff:37:73:3d:54:bb:53:e1:1a:5e:b8:98:b6:
7b:90:ce:07:19:6f:67:48:93:d0:2e:84:7f:36:c0:
d7:6a:c5:ed:19:1e:85:33:5f:41:70:8f:45:cd:a6:
d2:5e:5d:f4:21:1e:d9:a7:2d:03:b3:8b:bc:23:2b:
a5:b6:cb:b9:39:b3:71:74:02:2e:b9:b6:33:69:43:
f3:8c:f4:ef:5d:fb:7b:fa:ac:ed:96:68:0f:7e:0e:
37:d0:85:3f:49:d6:a2:06:bf:fa:be:c5:73:9f:57:
d3:f5:f6:d4:2d:7c:56:ab:b2:64:33:67:3c:5d:fd:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7C:A5:4B:08:AC:1C:B1:E4:9D:55:5C:F4:DE:51:BD:E3:A5:6B:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/8e995849-0009-3de2-9b32-fedf49d93743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
X509v3 Authority Key Identifier:
keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f6:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:33:ce:33:18:ca:7a:9c:02:38:85:b4:77:a1:4f:12:3e:5d:
0c:1c:00:40:a4:c5:1d:05:90:ac:f5:e3:3b:4d:5c:d3:8f:21:
e0:71:69:c5:fc:1a:42:37:52:af:4a:06:c0:04:e7:1d:05:5f:
1c:a6:8d:72:7b:41:0c:db:1b:85:38:ad:a1:d4:9a:f1:5c:86:
15:53:6b:32:09:d6:1a:c3:e6:90:21:6e:81:26:94:20:fc:13:
68:61:b4:85:e9:f5:32:33:21:7a:52:9d:b7:c6:ad:c3:38:5b:
4d:fa:19:fe:1f:7f:d2:ba:a8:be:76:71:2d:50:b7:e1:02:f1:
7d:10:bd:8a:75:44:3a:ef:30:49:74:80:26:10:0a:57:b5:ac:
44:14:5d:a3:aa:87:a4:8a:2f:d9:f7:f0:cd:6b:44:e4:cc:59:
11:76:6b:19:ea:96:d7:a2:30:70:0e:ab:d1:91:0d:93:6e:21:
cf:6b:a6:7d:41:45:7b:99:70:d7:ba:ca:17:61:ec:49:91:fd:
f4:2f:02:88:8e:12:9b:9d:ba:54:66:9e:7d:b6:af:4d:fd:c3:
73:0c:d7:67:56:75:ef:77:7d:90:ff:96:bc:a8:3a:30:c4:bf:
37:be:d0:fd:d7:c2:2a:c6:15:9f:a2:54:f4:5b:b9:5c:2e:ab:
5d:d0:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:11:36 2026 by rpki-client